| thenewsman.in/new/auth/wmaoqc/YXZpQHdlY2FyZWNvbXB1dGVycy5jb20= | 69.49.246.224 | | 0 B |
URL thenewsman.in/new/auth/wmaoqc/YXZpQHdlY2FyZWNvbXB1dGVycy5jb20= IP69.49.246.224:0 ASN#46606 UNIFIEDLAYER-AS-1
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - Microsoft Outlook | openphish | Office365 | |
GET /new/auth/wmaoqc/YXZpQHdlY2FyZWNvbXB1dGVycy5jb20= HTTP/1.1
Host: thenewsman.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 02 Jun 2023 12:15:25 GMT
Server: Apache
refresh: 0;url=https://pub-887adfef303443cc97eee0e66e6d6dbc.r2.dev/nick.html?email=avi@wecarecomputers.com
Content-Length: 0
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
|
|
| pub-887adfef303443cc97eee0e66e6d6dbc.r2.dev/nick.html?email=avi@wecarecomputers.com | 104.18.2.35 | 200 OK | 7.8 kB |
URL User Request GET HTTP/1.1pub-887adfef303443cc97eee0e66e6d6dbc.r2.dev/nick.html?email=avi@wecarecomputers.com IP104.18.2.35:443
CertificateIssuerLet's Encrypt Subject*.r2.dev Fingerprint87:5C:76:14:05:03:7E:AD:00:B9:80:0B:3F:E7:E3:25:D8:A5:4C:03 ValidityMon, 17 Apr 2023 14:40:35 GMT - Sun, 16 Jul 2023 14:40:34 GMT
File typeHTML document, ASCII text, with very long lines (58341), with CRLF line terminators Hash3c20adb14150116b3de9ce077e325fdd faea2cce2f29f4a3b913e6a19737199d4f5bf97a 7782688e4ba64b536e3ea542b5226f712a4e84c95806bf0859b4b73cca898366
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - Microsoft Outlook | urlquery | suspicious | Suspicious - JavaScript obfusction |
GET /nick.html?email=avi@wecarecomputers.com HTTP/1.1
Host: pub-887adfef303443cc97eee0e66e6d6dbc.r2.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 02 Jun 2023 12:15:27 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"3c20adb14150116b3de9ce077e325fdd"
Last-Modified: Thu, 01 Jun 2023 16:23:12 GMT
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7d0f9f2dea70b4ed-OSL
Content-Encoding: gzip
|
|
| cdnjs.cloudflare.com/ajax/libs/jquery/3.5.0/jquery.min.js | 104.17.25.14 | 200 OK | 28 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/jquery/3.5.0/jquery.min.js IP104.17.25.14:443
Requested byhttps://pub-887adfef303443cc97eee0e66e6d6dbc.r2.dev/nick.html?email=avi@wecarecomputers.com CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com FingerprintA9:11:71:07:07:92:48:7E:A9:3C:E8:32:25:3F:EB:AC:7D:51:7E:8F ValidityWed, 03 Aug 2022 00:00:00 GMT - Wed, 02 Aug 2023 23:59:59 GMT
File typeASCII text, with very long lines (65451) Hash12108007906290015100837a6a61e9f4 1d6ae46f2ffa213dede37a521b011ec1cd8d1ad3 c4dccdd9ae25b64078e0c73f273de94f8894d5c99e4741645ece29aeefc9c5a4
GET /ajax/libs/jquery/3.5.0/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pub-887adfef303443cc97eee0e66e6d6dbc.r2.dev
DNT: 1
Connection: keep-alive
Referer: https://pub-887adfef303443cc97eee0e66e6d6dbc.r2.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 02 Jun 2023 12:15:27 GMT
content-type: application/javascript; charset=utf-8
content-length: 27964
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec4-15d95"
last-modified: Mon, 04 May 2020 16:11:48 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 2489261
expires: Wed, 22 May 2024 12:15:27 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uwnMmHOie0up02jn1R%2F9CFXijx7RxQ76ep%2BWNBF3vpATICXWFRDMd5EU9ZyOT1Fsjd1BGEL84g1h%2FFDcbbda0iYGEXiq9MrhkBNip2YSVNSAZ5XP9ypQPOf1gjMLnEUFn0jxUBT6"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7d0f9f36edd40b59-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdn-jm-tools.web.app/d..p/others/mi..cro---t/Converged_v21033_U7M7Fc-d_yiO2hIJng7nRg2.css | 199.36.158.100 | 200 OK | 19 kB |
URL GET HTTP/2cdn-jm-tools.web.app/d..p/others/mi..cro---t/Converged_v21033_U7M7Fc-d_yiO2hIJng7nRg2.css IP199.36.158.100:443
Requested byhttps://pub-887adfef303443cc97eee0e66e6d6dbc.r2.dev/nick.html?email=avi@wecarecomputers.com CertificateIssuerGoogle Trust Services LLC Subjectweb.app Fingerprint4E:21:5F:50:F4:50:7E:03:EA:B2:34:D3:10:A5:7D:22:77:B1:BF:22 ValidityWed, 10 May 2023 14:59:43 GMT - Tue, 08 Aug 2023 14:59:42 GMT
File typeASCII text, with very long lines (61112) Hash53b33b15cf9dff288eda12099e0ee746 1748b7bd3b89b84d800374083af646fec11ff082 30c90ea15ddeec7d675ed3eaaf26e8283b908265c5a6a5ff00345d03c24233f0
GET /d..p/others/mi..cro---t/Converged_v21033_U7M7Fc-d_yiO2hIJng7nRg2.css HTTP/1.1
Host: cdn-jm-tools.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-887adfef303443cc97eee0e66e6d6dbc.r2.dev/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: gzip
content-type: text/css; charset=utf-8
etag: "180ed6b42ce49176e493ebf3f2145e670be96178b9e2f60001e81532e32268cb"
last-modified: Sat, 25 Apr 2020 21:22:54 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Fri, 02 Jun 2023 12:15:27 GMT
x-served-by: cache-bma1683-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1685708128.821516,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 18705
X-Firefox-Spdy: h2
|
|
| cdn-jm-tools.web.app/d..p/others/mi..cro---t/ellipsis_grey_2b5d393db04a5e6e1f739cb266e65b4c.svg | 199.36.158.100 | 200 OK | 230 B |
URL GET HTTP/2cdn-jm-tools.web.app/d..p/others/mi..cro---t/ellipsis_grey_2b5d393db04a5e6e1f739cb266e65b4c.svg IP199.36.158.100:443
Requested byhttps://pub-887adfef303443cc97eee0e66e6d6dbc.r2.dev/nick.html?email=avi@wecarecomputers.com CertificateIssuerGoogle Trust Services LLC Subjectweb.app Fingerprint4E:21:5F:50:F4:50:7E:03:EA:B2:34:D3:10:A5:7D:22:77:B1:BF:22 ValidityWed, 10 May 2023 14:59:43 GMT - Tue, 08 Aug 2023 14:59:42 GMT
File typeSVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (915), with no line terminators Hash2b5d393db04a5e6e1f739cb266e65b4c 6a435df5cac3d58ccad655fe022ccf3dd4b9b721 16c3f6531d0fa5b4d16e82abf066233b2a9f284c068c663699313c09f5e8d6e6
GET /d..p/others/mi..cro---t/ellipsis_grey_2b5d393db04a5e6e1f739cb266e65b4c.svg HTTP/1.1
Host: cdn-jm-tools.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-887adfef303443cc97eee0e66e6d6dbc.r2.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: image/svg+xml
etag: "cf034e803491c0dbb1074332cd18fac418b94b0a139a7ddbf92ec40574951a8a-br"
last-modified: Sat, 25 Apr 2020 21:22:54 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Fri, 02 Jun 2023 12:15:27 GMT
x-served-by: cache-bma1683-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1685708128.822374,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 230
X-Firefox-Spdy: h2
|
|
| cdn-jm-tools.web.app/d..p/others/mi..cro---t/arrow_left_7cc096da6aa2dba3f81fcc1c8262157c.png | 199.36.158.100 | 200 OK | 240 B |
URL GET HTTP/2cdn-jm-tools.web.app/d..p/others/mi..cro---t/arrow_left_7cc096da6aa2dba3f81fcc1c8262157c.png IP199.36.158.100:443
Requested byhttps://pub-887adfef303443cc97eee0e66e6d6dbc.r2.dev/nick.html?email=avi@wecarecomputers.com CertificateIssuerGoogle Trust Services LLC Subjectweb.app Fingerprint4E:21:5F:50:F4:50:7E:03:EA:B2:34:D3:10:A5:7D:22:77:B1:BF:22 ValidityWed, 10 May 2023 14:59:43 GMT - Tue, 08 Aug 2023 14:59:42 GMT
File typePNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data Hash7cc096da6aa2dba3f81fcc1c8262157c a50776316f0220ed7cd7882a68c742a8861c999d ab50358475adae73a435466c72d1a48ab124e8ae06614663716a46dce5ac8b83
GET /d..p/others/mi..cro---t/arrow_left_7cc096da6aa2dba3f81fcc1c8262157c.png HTTP/1.1
Host: cdn-jm-tools.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-887adfef303443cc97eee0e66e6d6dbc.r2.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-type: image/png
etag: "a512441fed43fc63c5a2bbce213d4081532632f57c75eb60cb7dd0e4a1126b38"
last-modified: Sat, 25 Apr 2020 21:22:54 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Fri, 02 Jun 2023 12:15:27 GMT
x-served-by: cache-bma1683-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1685708128.822639,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 240
X-Firefox-Spdy: h2
|
|
| cdn-jm-tools.web.app/d..p/others/mi..cro---t/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg | 199.36.158.100 | 200 OK | 1.3 kB |
URL GET HTTP/2cdn-jm-tools.web.app/d..p/others/mi..cro---t/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg IP199.36.158.100:443
Requested byhttps://pub-887adfef303443cc97eee0e66e6d6dbc.r2.dev/nick.html?email=avi@wecarecomputers.com CertificateIssuerGoogle Trust Services LLC Subjectweb.app Fingerprint4E:21:5F:50:F4:50:7E:03:EA:B2:34:D3:10:A5:7D:22:77:B1:BF:22 ValidityWed, 10 May 2023 14:59:43 GMT - Tue, 08 Aug 2023 14:59:42 GMT
File typeSVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (3651), with no line terminators Hashee5c8d9fb6248c938fd0dc19370e90bd d01a22720918b781338b5bbf9202b241a5f99ee4 04d29248ee3a13a074518c93a18d6efc491bf1f298f9b87fc989a6ae4b9fad7a
GET /d..p/others/mi..cro---t/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg HTTP/1.1
Host: cdn-jm-tools.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-887adfef303443cc97eee0e66e6d6dbc.r2.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: image/svg+xml
etag: "2084deafc36fbaca40a6352319b3c1edb1262245428033547de6b82e0c2dcfe8-br"
last-modified: Sat, 25 Apr 2020 21:22:54 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Fri, 02 Jun 2023 12:15:27 GMT
x-served-by: cache-bma1683-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1685708128.823008,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 1274
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/s/gts1d4int/wrllXI_-LL8 | 142.250.74.3 | | 472 B |
URL ocsp.pki.goog/s/gts1d4int/wrllXI_-LL8 IP142.250.74.3:0
Hashc71533c4704c778fa30223cb4a41e7a6 b53f269f4dc4ed742c7b38be79958d37e8482f97 37988e16d2de6ebd0c9ed907a98806ddb4632296be5b9b6407fe4c72aa6eca2f
POST /s/gts1d4int/wrllXI_-LL8 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Jun 2023 12:15:28 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| aadcdn.msauth.net/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg | 13.107.246.53 | 200 OK | 673 B |
URL GET HTTP/2aadcdn.msauth.net/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg IP13.107.246.53:443 ASN#8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://pub-887adfef303443cc97eee0e66e6d6dbc.r2.dev/nick.html?email=avi@wecarecomputers.com CertificateIssuerDigiCert Inc Subjectaadcdn.msauth.net Fingerprint53:74:89:61:D2:A4:7B:B7:BC:6E:DA:17:D3:7E:5A:A1:F0:77:AD:84 ValidityFri, 28 Apr 2023 00:00:00 GMT - Sun, 28 Apr 2024 23:59:59 GMT
File typeSVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1864), with no line terminators Hashbc3d32a696895f78c19df6c717586a5d 9191cb156a30a3ed79c44c0a16c95159e8ff689d 0e88b6fcbb8591edfd28184fa70a04b6dd3af8a14367c628edd7caba32e58c68
GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1
Host: aadcdn.msauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-887adfef303443cc97eee0e66e6d6dbc.r2.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: public, max-age=31536000
content-length: 673
content-type: image/svg+xml
content-encoding: gzip
content-md5: DhdidjYrlCeaRJJRG/y9mA==
last-modified: Wed, 12 Feb 2020 22:01:30 GMT
etag: 0x8D7B0071D86E386
x-cache: TCP_HIT
x-ms-request-id: 16548846-101e-000a-669e-943966000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref-originshield: 0SaN5ZAAAAAA36lFld+W/QJEgk7CTX3IYQU1TMDRFREdFMTkxNwAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
x-azure-ref: 0YN15ZAAAAAC+OjotWg54TZtVuwyFyeGnU1ZHMjBFREdFMDUyMAAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
date: Fri, 02 Jun 2023 12:15:27 GMT
X-Firefox-Spdy: h2
|
|
| pub-887adfef303443cc97eee0e66e6d6dbc.r2.dev/*https://aadcdn.msauth.net/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg*/ | 104.18.2.35 | 404 Not Found | 3.4 kB |
URL GET HTTP/1.1pub-887adfef303443cc97eee0e66e6d6dbc.r2.dev/*https://aadcdn.msauth.net/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg*/ IP104.18.2.35:443
Requested byhttps://pub-887adfef303443cc97eee0e66e6d6dbc.r2.dev/nick.html?email=avi@wecarecomputers.com CertificateIssuerLet's Encrypt Subject*.r2.dev Fingerprint87:5C:76:14:05:03:7E:AD:00:B9:80:0B:3F:E7:E3:25:D8:A5:4C:03 ValidityMon, 17 Apr 2023 14:40:35 GMT - Sun, 16 Jul 2023 14:40:34 GMT
File typegzip compressed data, from Unix\012- data Hash1c32a61ed4240ad1d1c00ae51a8acc1b 3af62746ae1296e4e3e39b650dae677e6e6edbea 6deb7f93eb8d3f4ea3885aff22ad0054b49915de663ca3c531b54c05cfad7a61
GET /*https://aadcdn.msauth.net/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg*/ HTTP/1.1
Host: pub-887adfef303443cc97eee0e66e6d6dbc.r2.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-887adfef303443cc97eee0e66e6d6dbc.r2.dev/nick.html?email=avi@wecarecomputers.com
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 02 Jun 2023 12:15:28 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7d0f9f383a3db4ed-OSL
Content-Encoding: gzip
|
|
| cdn-jm-tools.web.app/d..p/others/mi..cro---t/favicon.ico | 0.0.0.0 | | 0 B |
URL GET cdn-jm-tools.web.app/d..p/others/mi..cro---t/favicon.ico IP0.0.0.0:0
Requested byhttps://pub-887adfef303443cc97eee0e66e6d6dbc.r2.dev/nick.html?email=avi@wecarecomputers.com CertificateIssuerGoogle Trust Services LLC Subjectweb.app Fingerprint4E:21:5F:50:F4:50:7E:03:EA:B2:34:D3:10:A5:7D:22:77:B1:BF:22 ValidityWed, 10 May 2023 14:59:43 GMT - Tue, 08 Aug 2023 14:59:42 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /d..p/others/mi..cro---t/favicon.ico HTTP/1.1
Host: cdn-jm-tools.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-887adfef303443cc97eee0e66e6d6dbc.r2.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-length: 421
cache-control: max-age=3600
content-encoding: br
content-type: image/x-icon
etag: "928026765089cd2a4183510ed4f8be0259cd85b776338ee2c337cacc18bdf016-br"
last-modified: Sat, 25 Apr 2020 21:22:54 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Fri, 02 Jun 2023 12:15:28 GMT
x-served-by: cache-bma1679-BMA
x-cache: HIT
x-cache-hits: 2
x-timer: S1685708128.278110,VS0,VE0
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
|
|